- auth: guarded page routes redirect a logged-out browser to a configurable login path instead of a raw JSON 401 (opt-in auth.pageAuth) (b9ab9804)
- auth: access/refresh token migrations derive the user_id column type from the model PK via foreignId (5e47bdb3)

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01UKLsaTpnTgYhLcSmpWk5y8